CVE record · 1 source
CVE-2026-85250
CVSS 7.5Improper Restriction of XML External Entity Reference vulnerability in Apache Camel XPath component.
- Vendor
- Oracle
- Product
- java
- CVSS
- 7.5
- EPSS
- 0.006 (p46)
- Exposure class
- Developer platform, Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Improper Restriction of XML External Entity Reference vulnerability in Apache Camel XPath component.
Improper Restriction of XML External Entity Reference vulnerability in Apache Camel XPath component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. With documentType set to InputSource…